mirror/moodle-auth_outage
1
0
Fork 0
mirror of https://github.com/catalyst/moodle-auth_outage.git synced 2026-05-17 05:48:43 +02:00
Code Issues Packages Projects Releases Wiki Activity

Issue #88 - Injection should be prevented in settings even if symlinks are used.

Browse Source
This commit is contained in:
Daniel Thee Roperto
2016-12-14 11:06:07 +11:00
parent c809873f9a
commit 7946dccd5e
2 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
classes/local/outagelib.php
View File

@@ -187,8 +187,8 @@ class outagelib {
}
self::$injectcalled = true;
// Do not inject into admin/settings.php, see Issue #65.
if ($_SERVER['SCRIPT_FILENAME'] === $CFG->dirroot.'/admin/settings.php') {
// Do not inject into admin/settings.php.
if ($_SERVER['SCRIPT_NAME'] == '/'.$CFG->admin.'/settings.php') {
return false;
}